# `io.github.Datura-ai/lium-gpu-cloud` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.Datura-ai/lium-gpu-cloud
- JSON: https://anlyon.dev/api/v1/servers/io.github.Datura-ai/lium-gpu-cloud
- Version: 1.0.0 (active)
- Publisher: io.github.Datura-ai (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/Datura-ai/lium-skill
- Metadata from the official MCP Registry, synced 2026-10-21T18:15:43.529Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Lium GPU Cloud: live GPU prices and rent links
Live prices and rent links for H100, H200, B200 and RTX 4090 GPUs on Lium, plus Lium docs search.
```

Scanned 2026-10-21T19:02:36.806Z over streamable-http.

**11 tools: 1 can delete or cancel things, 2 change things and 8 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 1 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 8 | allow |

## Findings

- **high** References to secrets on disk in `rent_pod` ([sensitive-path](https://anlyon.dev/methodology#sensitive-path))

```untrusted-server-text
The input schema at properties.ssh_public_key.description refers to "~/.ssh/id_ed25519.pub".

inputSchema.properties.ssh_public_key.description: "OpenSSH public key to log in with (e.g. ~/.ssh/id_ed25519.pub); default: the keys saved on your Lium..."
```


## Deletes or cancels (1)

Removes, cancels or revokes something. Claude Code: deny.

### `remove_pod`

- The name "remove_pod" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Request pod deletion. Billing stops when accepted; deletion may finish asynchronously (get_pod shows DELETING). Data on the pod is lost.
```

## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `estimate_provider_earnings`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Estimate what a provider earns per month on Lium by listing GPUs of a model, as the rewards calculator does: rental income (95% of the renter price) and rented extra at the last 30 days' utilisation, plus idle pay at the validator's rate for every unrented hour; with what those GPUs actually earned and the middle-half range across providers. Use when someone asks what their GPUs could earn on Lium; for renting GPUs use search_gpus. An estimate, not a guarantee.
```

### `rent_pod`

- Nothing in its name or description says what it does, so it is counted as a write.
- Findings: high sensitive-path

Description, as the server wrote it:

```untrusted-server-text
Rent a GPU pod on Lium with your API key and wait until it runs; returns the pod id and the ssh command. Spends money from your Lium balance: the pod is billed per second until remove_pod, also when idle. Give gpu (and count, optional max_price_per_gpu_hour and country) to let Lium pick the cheapest matching node, or node_id from search_gpus alone for that node. idempotency_key is required: if a call fails or times out, retry with the same key within 24 hours so it cannot rent twice.
```

## Only reads (8)

Looks things up and changes nothing. Claude Code: allow.

### `get_balance`

- The name "get_balance" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Your Lium balance in USD.
```

### `get_gpu_prices`

- The name "get_gpu_prices" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Live price range (min, median, max USD per GPU-hour) and free GPU count for each GPU model rentable on Lium right now. Use for "what does an H100 cost" or comparing models; use search_gpus to pick a node to rent. Pass count for multi-GPU quotes: a 1-GPU price can come from a node with one free GPU.
```

### `get_pod`

- The name "get_pod" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
One pod: status, ssh command (once RUNNING), price per hour and spend so far.
```

### `list_pods`

- The name "list_pods" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Your Lium pods with status, ssh command and price per hour.
```

### `list_templates`

- The name "list_templates" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Docker templates a pod can start from (official ones, your own and other users' public ones; official and yours mark which), for rent_pod template_id.
```

### `read_page`

- The name "read_page" says "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Return the raw Markdown source for a documentation page. Accepts a full URL, absolute slug (e.g. /providers/quickstart), or basename (e.g. quickstart). On tie among basenames, prefers pages in audience order: Providers > Validators > Renters > Developers.
```

### `search`

- The name "search" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search the Lium documentation for pages matching the query. Use for how-to questions (renting, SSH, templates, providing GPUs); for live GPU availability or prices use search_gpus or get_gpu_prices instead. Optionally filter by audience (providers, validators, pod-users, developers); without one, pages for the other side (renter or provider, guessed from the query) rank lower.
```

### `search_gpus`

- The name "search_gpus" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List GPU nodes that can be rented on Lium right now, cheapest per GPU-hour first, with live USD prices and a rent link for each. Use when the user wants a specific machine (GPU model, count, country, price cap); use get_gpu_prices for a price overview. Each node has tier (secure or spot), reliability_score and min_gpus_per_rental (some nodes rent only whole). Read-only: next_step says how to rent one.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `lium-gpu-cloud`:

```json
{
  "permissions": {
    "allow": [
      "mcp__lium-gpu-cloud__search",
      "mcp__lium-gpu-cloud__read_page",
      "mcp__lium-gpu-cloud__search_gpus",
      "mcp__lium-gpu-cloud__get_gpu_prices",
      "mcp__lium-gpu-cloud__list_pods",
      "mcp__lium-gpu-cloud__get_pod",
      "mcp__lium-gpu-cloud__get_balance",
      "mcp__lium-gpu-cloud__list_templates"
    ],
    "ask": [
      "mcp__lium-gpu-cloud__estimate_provider_earnings",
      "mcp__lium-gpu-cloud__rent_pod"
    ],
    "deny": [
      "mcp__lium-gpu-cloud__remove_pod"
    ]
  }
}
```